A vulnerability in the PESpin file format parser of ClamAV could allow an unauthenticated, remote...
CVE-2026-20339
A vulnerability in the PESpin file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a Do
2026-08-08 归档
今日共收录 1332 条安全情报，包含 443 个 CVE，483 篇安全通告，以及 115 篇研究论文。
← 返回归档列表A vulnerability in the PDF file format parser of ClamAV could allow an unauthenticated, remote...
CVE-2026-20346
A vulnerability in the PDF file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS c
Allocation of Resources Without Limits or Throttling vulnerability in DivvyPayHQ...
CVE-2026-67585
Allocation of Resources Without Limits or Throttling vulnerability in DivvyPayHQ absinthe_federation allows an unauthent
A vulnerability in the GPT file format parser of ClamAV could allow an unauthenticated, remote...
CVE-2026-20345
A vulnerability in the GPT file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS c
An account holding the nexus:settings:update permission in Nexus Repository 3 (or the equivalent...
CVE-2026-17593
An account holding the nexus:settings:update permission in Nexus Repository 3 (or the equivalent nexus:settings permissi
A vulnerability in the zip archive parser of ClamAV could allow an unauthenticated, remote...
CVE-2026-20337
A vulnerability in the zip archive parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condi
Nexus Repository 3 contains a Server-Side Request Forgery (SSRF) vulnerability in the email...
CVE-2026-17597
Nexus Repository 3 contains a Server-Side Request Forgery (SSRF) vulnerability in the email configuration verification f
Sonatype Nexus Repository 3 did not properly filter internal configuration keys from user...
CVE-2026-17598
Sonatype Nexus Repository 3 did not properly filter internal configuration keys from user-supplied task properties when
Nexus Repository 3 contained an endpoint used to change the administrator account password during...
CVE-2026-17599
Nexus Repository 3 contained an endpoint used to change the administrator account password during initial onboarding. Th
Nexus Repository 3 contained a privilege escalation vulnerability in the REST privileges API. An...
CVE-2026-14644
Nexus Repository 3 contained a privilege escalation vulnerability in the REST privileges API. An authenticated user with
A user holding a permission to update privilege definitions could modify a wildcard privilege...
CVE-2026-17601
A user holding a permission to update privilege definitions could modify a wildcard privilege already assigned to their
Nexus Repository 3 CE/Pro versions 3.0.0 through 3.94.x contain an incorrect authorization...
CVE-2026-17594
Nexus Repository 3 CE/Pro versions 3.0.0 through 3.94.x contain an incorrect authorization vulnerability (CWE-863) in th
Sonatype Nexus Repository 3 did not immediately terminate a user's active login session or revoke...
CVE-2026-17600
Sonatype Nexus Repository 3 did not immediately terminate a user's active login session or revoke their cached permissio
Nexus Repository 3 did not sufficiently restrict which HikariCP connection-pool properties could...
CVE-2026-17603
Nexus Repository 3 did not sufficiently restrict which HikariCP connection-pool properties could be set through the Data
Nexus Repository 3 did not fully sandbox JEXL expressions used in Content Selectors. An account...
CVE-2026-17595
Nexus Repository 3 did not fully sandbox JEXL expressions used in Content Selectors. An account holding the nexus:select
A vulnerability was determined in WonderTrader up to 0.9.9. This impacts an unknown function of...
CVE-2026-19212
A vulnerability was determined in WonderTrader up to 0.9.9. This impacts an unknown function of the file src/Includes/WT
A vulnerability was found in SourceCodester Photo Share Website 1.0. This affects an unknown...
CVE-2026-19211
A vulnerability was found in SourceCodester Photo Share Website 1.0. This affects an unknown function of the file /socia
A vulnerability has been found in SourceCodester Photo Share Website 1.0. The impacted element is...
CVE-2026-19210
A vulnerability has been found in SourceCodester Photo Share Website 1.0. The impacted element is an unknown function of
A flaw has been found in SourceCodester Photo Share Website 1.0. The affected element is an...
CVE-2026-19209
A flaw has been found in SourceCodester Photo Share Website 1.0. The affected element is an unknown function of the file
CodeIgniter: Path traversal in UploadedFile::move() when using client-provided filenames
CVE-2026-63222
### Impact In affected versions, calling `UploadedFile::move()` **without a second argument** uses the client-provided f